







Study with the several resources on Docsity
Earn points by helping other students or get them with a premium plan
Prepare for your exams
Study with the several resources on Docsity
Earn points to download
Earn points by helping other students or get them with a premium plan
A series of multiple-choice questions and answers related to windows operating system security. It covers various aspects of security, including attacker types, update management, execution modes, group policies, firewall configuration, network security tools, user rights, security templates, powershell commands, network access protection (nap), service startup types, patch management, kerberos authentication, active directory certificate services (ad cs), dynamic access control, security auditing, security compliance management, user account control (uac), windows registry, windows defender, virtual private networks (vpns), and more. A valuable resource for students and professionals seeking to enhance their understanding of windows security principles and practices.
Typology: Exams
1 / 13
This page cannot be seen from the preview
Don't miss anything!








Which type of attacker has actions that are considered noble by the attacker but could cause more harm than good? A. White Hat B. Black Hat C. Red Hat D. Gray Hat โโD. Gray Hat During which step of Microsofts recommended Update Management Process would an update be tested? A. Assess B. Identify C. Evaluate and Plan D. Deploy โโC. Evaluate and Plan Which execution mode has unrestricted access to the underlying hardware? A. Kernel B. Operating System C. User D. Guest โโA. Kernel Which one of the following can be managed through group policies (GPO)? A. Authentication settings
B. Software installation and update C. IPsec connections D. All of the above โโD. All of the above The Windows Security Configuration Wizard can be used to configure the Windows Firewall with advanced security support. A. True B. False โโA. True Which one of the following is a Windows Firewall advantage? A. Can be configured with the Group Policy B. Provides a very granular customization of applications C. Can be configured with Netsh or PowerShell D. All of the above โโB. Provides a very granular customization of applications Many current network security tools such as Firewalls and Intrusion Detection Systems and Intrusion Prevention Systems are not 100% compatible with IPv6. A. True B. False โโA. True Which one of the following default rights can be performed by a member of the Windows User Group? A. Increase a process working set B. Allow logons through the Remote Desktop Services C. Create global objects D. Load and unload device drivers โโA. Increase a process working set
PowerShell is built on top of the .Net CRL and .Net Framework. A. True B. False โโA. True Which solution is best to avoid downloading an untrusted patch? A. Disable automatic updates B. Check for updates on a trusted network C. Verify the source of the update D. All of the above โโD. All of the above In a Kerberos Authentication process which one of the following sends a Ticket Granting Ticket secret key and a session key as a function? A. TGS_RESPONSE B. AS_RESPONSE C. TGS_REQ D. AP_RESPONSE โโB. AS_RESPONSE An API is a set of functions that an application can call to allow the application to operate within Windows. A. True B. False โโA. True Which Active Directory Certificate Service (AD CS) server role allows routers and other network devices that do not have a domain account to obtain certificates?
A. Certificate Enrolment Web Service B. Online Responder C. Certificate Enrolment Policy Web Service D. Network Device Enrollment Service โโD. Network Device Enrollment Service Which value in the PowerShell "execution policy" allows loading of all configuration files and scripts? A. AllSigned B. Unrestricted C. Undefined D. RemoteSigned โโB. Unrestricted In which multi tasking mode can an operating system take control of the processor without consent from the task? A. Non-preemptive multi-tasking B. Preemptive multi-tasking C. Multi-threading D. Multi-programming โโB. Preemptive multi-tasking Which Dynamic Access Control capability allows for "safety net" policies? A. Centralize Access Policies B. Data Classification C. Centralized Auditing D. Rights Management Service โโA. Centralize Access Policies Which one of the following is a benefit of Dynamic Access Control?
A. True B. False โโA. True Which one of the following is required for Windows BitLocker configuration? A. Trusted Platform Module (TPM) B. Hardware Security Module C. UEFI (Unified Extensible Firmware Interface) D. None of the above โโA. Trusted Platform Module (TPM) CVE is short for Critical Vulnerabilities and Exploits. A. True B. False โโB. False Of the following methods which one is a tool that centrally manages and configures Windows operating systems and applications and user settings? A. Microsoft Security Configuration Wizard B. Security Content Automation Protocol (SCAP) C. Group Policy D. None of the above โโC. Group Policy In which one of the Social Engineering stages would you establish credibility? A. Information Gathering B. Select Target
C. Relationship Development D. Relationship Exploitation โโC. Relationship Development In a Hardening Process which method uses plaintext files containing software and driver installation configuration settings? A. Security Templates B. Microsoft Baseline Security Analyzer C. Security Compliance Manager Toolkit (SCM) D. Group Policy โโA. Security Templates Which method scans systems to identify common security misconfigurations and missing security updates? A. Microsoft Security Configuration Wizard B. Microsoft Security Compliance Manager C. Microsoft Baseline Security Analyzer D. Group Policy โโC. Microsoft Baseline Security Analyzer Which two of the following categories of monitoring are in the Action Center formerly known as the Windows Security Center? A. Windows API and Applications B. Windows Services and Processes C. Security and Maintenance D. Memory Management and CPU usage โโC. Security and Maintenance Which Internet Protocol Security (IPsec) protocol provides confidentiality by encrypting data?
Which Network Access Protection (NAP) client collects and maintains a system health status? A. System Health Agent B. NAP Agent C. NAP Enforcement Client D. None of the above โโB. NAP Agent Which option is best for a server to connect to a network? A. Wired B. Wireless C. Virtual Private Network D. None of the above โโA. Wired Which one of the following steps is not part of securing the Microsoft patch process? A. Always validate patches B. Apply patches while on the road C. Harden the WSUS server D. Ensure ALL software is patched not just Microsoft โโB. Apply patches while on the road User Account Control (UAC) was introduced in Windows XP and Server 2003. A. True B. False โโB. False A logical Patch Management process is a one-time process that businesses should establish to ensure success.
A. True B. False โโB. False In the Windows Registry what is a collection of discrete files called? A. Programs B. Hives C. Keys D. Trees โโB. Hives Windows Defender was formerly known as Microsoft Anti-Spyware. A. True B. False โโA. True Which method can start PowerShell in Windows 8? A. > All Programs > Accessories > Windows PowerShell Folder > Windows PowerShell B. Charm > Search > type PowerShell > click Windows PowerShell C. In Server Manager: Tools menu > Windows PowerShell D. All of the above โโB. Charm > Search > type PowerShell > click Windows PowerShell A Virtual Private Network allows two systems to connect over a public network and have the assurance of which of the following? A. Confidentiality B. Authentication
D. None of the above โโB. Kernel32.dll Which type of permissions are created by default on non child objects or based by user assignment? A. Inherited B. Standard C. Effective D. Explicit โโD. Explicit